"Notice that the above rule set is adding a new chain called
"port-scan". You don;t have to name it such; it's just easier to
keep things organized. You can also add timeouts to the above rule
set like so: